You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Loren Wilton <lw...@earthlink.net> on 2006/08/28 14:30:39 UTC
Ok, what's the point of this spam/phish?
I can't figure out who is trying to do what here, but it looks real
suspicious. Anyone seen one of these before?
Loren
Status: U
Return-Path: <dr...@dm-4.com>
Received: from mta5a.dm-4.com ([64.40.98.32])
by mx-clapper.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id
1ghjmQ4WF3Nl34b2
for <lw...@earthlink.net>; Sun, 27 Aug 2006 08:03:56 -0400 (EDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; q=dns; s=x; d=dm-4.com;
h=Date:Subject:From:To:Mime-Version:Content-Type;
b=bveD9400nJ18QotyLuey2SwDQoG8lK/VCoFxRlPQEkOts6AoGD2kr02TPEBlYGtKAJBAEz0/vu5O hUkHSekGa+CPYZHDPIJO2FWTERIO6sUYqFifQJBu54RgUr5R0PN1s8qTb6Gbj68hN5npUh/AvOrc BJoV0ftmoVaSvURJSFI=DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=x; d=dm-4.com; b=WVASzl9kHmkmjVLCihLcLHaHwky6WdpNboPQ+ExpbRnS6UpXJjJTtUaJ+TLvDTgjbzY55U8mcqtM 4oxLqh/sQD/4jpL4TcnqrTNsWBAYiKhzsXU+WqaOpE/tLxbgMii9eGlE/LnRLLjp+4H6wY6jFx+9 MdtNTCsPGCB1NR4njd8=;Received: by mta5a.dm-4.com (PowerMTA(TM) v3.0r31) id hu652o09jc44 for<LW...@EARTHLINK.NET>; Fri, 25 Aug 2006 15:48:22 -0700 (envelope-from<dr...@dm-4.com>)Date: Fri, 25 Aug 2006 22:48:22 GMTSubject: Notice of DRAM Class Action Partial SettlementsFrom: "DRAM Class Administrator" <dr...@dm-4.com>To: LWILTON@EARTHLINK.NETReply-To: dramclassadministrator@dm-4.comX-Mailer: XTUU1N H2P03IY VZQTROO QG0ICIMime-Version: 1.0Content-Type: multipart/alternative; boundary=dmboundaryMessage-Id: <200608270803.1ghjmQ4WF3Nl34b2@mx-clappe
r.atl.sa.earthlink.net>X-ELNK-AV: 0X-ELNK-Info: sbv=0; sbrc=.0; sbf=0b; sbw=000;X-NKVIR: ScannedX-WiltonBefore: user wiltonX-Wilton: user wilton--dmboundaryContent-Type: text/plain; charset=iso-8859-1* * * * * * * * * * * * * * * * * * * * * * * * * * ** * * * * * * * * * * * * * * * * * * * * * * * * * *An Important Notice from the United States DistrictCourt for the Northern District of California AboutPartial Class Action Settlements Involving DynamicRandom Access Memory ("DRAM")* * * * * * * * * * * * * * * * * * * * * * * * * * ** * * * * * * * * * * * * * * * * * * * * * * * * * *IF YOU PURCHASED DRAM IN THE UNITED STATES, YOUCOULD GET BENEFITS FROM THE PARTIAL SETTLEMENTS.* * * * * * * * * * * * * * * * * * * * * * * * * * ** * * * * * * * * * * * * * * * * * * * * * * * * * *Three separate proposed settlements totaling$160,750,000.00 have been reached in a class actionlawsuit concerning prices of DRAM with defendants:Infineon Technologies AG and Infineon Technologies
North American Corp.; Samsung Semiconductor, Inc.;and Hynix Semiconductor Inc. and Hynix SemiconductorAmerica, Inc. These are the first settlements reachedin this litigation, which will continue against theremaining defendants. You may be a member of theSettlement Class whose rights may be affected bythis lawsuit. The sole purpose of this notice is toinform you of the lawsuit so that you may decide whatsteps to take in relation to it.You do not need to do anything to remain in the Class.Settlement Class members will be entitled to receivemoney from the settlement fund when it is ultimatelydistributed. If you want to exclude yourself from theClass, you must do so not later than October 3, 2006.Please read the Notice described in the next paragraphcarefully for directions on how to exclude yourself.If you do not timely exclude yourself from the Classbut want to object to any or all of the settlements,you must file a written objection not later thanOctober 3, 2006. Please read
the Notice describedin the next paragraph carefully on how to object.A more detailed description of this litigation and theproposed settlements are contained in the Notice ofPendency of Class Action and Partial Class ActionSettlements (the "Notice"). The Notice may be accessed at http://www.DramAntitrustSettlement.com/or obtained free of charge by writing to: In re DRAMAntitrust Litigation, c/o Rust Consulting, Inc., P.O.Box 24657, West Palm Beach, FL 33416 or calling theClass Administrator at (866) 483-9938.To obtain more information describing your rights underthe partial settlements, contact the Class Administratorby writing to: In re DRAM Antitrust Litigation, c/o RustConsulting, Inc., P.O. Box 24657, West Palm Beach, FL33416 or calling toll-free 1-866-483-9938.To access the settlement web site, click on thefollowing link: http://www.DramAntitrustSettlement.com/* * * * * * * * * * * * * * * * * * * * * * * * * * ** * * * * * * * * * * * * * * * * * * * * * * * * *
*--dmboundary
Re: Ok, what's the point of this spam/phish?
Posted by Logan Shaw <ls...@emitinc.com>.
On Mon, 28 Aug 2006, Expertsites, Inc. wrote:
> I received this message, too. It was sent to a specific incoming email
> address associated only with a former online order I placed for DRAM from
> Crucial Technology within the period mentioned in the settlement for the
> class action suit. Looking at the website and court documents available at
> the settlement website, it appears legit.
I got it too, and I was suspicious of it at first, but I looked
up the lawsuit, and it certainly seemed legit to me. In fact,
one of the parties named in the lawsuit was Hynix Semiconductor.
By coincidence, I was on the Hynix Semiconductor campus in
Icheon, Korea a few months back, so I'm pretty sure that part
is not made up. :-)
- Logan
Re: Ok, what's the point of this spam/phish?
Posted by Chris Thielen <cm...@someone.dhs.org>.
Expertsites, Inc. wrote:
> I received this message, too. It was sent to a specific incoming
> email address associated only with a former online order I placed for
> DRAM from Crucial Technology within the period mentioned in the
> settlement for the class action suit. Looking at the website and
> court documents available at the settlement website, it appears legit.
>
Same here, got this notice on my Crucial Technology
order-placing-email-address.
Re: Ok, what's the point of this spam/phish?
Posted by "Expertsites, Inc." <sp...@expertsites.com>.
----- Original Message -----
From: "Loren Wilton" <lw...@earthlink.net>
To: "SpamAssassin Users List" <us...@spamassassin.apache.org>
Sent: Monday, August 28, 2006 5:30 AM
Subject: Ok, what's the point of this spam/phish?
>I can't figure out who is trying to do what here, but it looks real
>suspicious. Anyone seen one of these before?
>
> Loren
>
> Status: U
> Return-Path: <dr...@dm-4.com>
/snip/
To obtain more information describing your rights underthe partial
settlements, contact the Class Administratorby writing to: In re DRAM
Antitrust Litigation, c/o RustConsulting, Inc., P.O. Box 24657, West Palm
Beach, FL33416 or calling toll-free 1-866-483-9938.To access the settlement
web site, click on thefollowing link:
http://www.DramAntitrustSettlement.com/* * * * * * * * * * * * * * * * * * *
* * * * * * * ** * * * * * * * * * * * * * * * * * * * * * * * * *
I received this message, too. It was sent to a specific incoming email
address associated only with a former online order I placed for DRAM from
Crucial Technology within the period mentioned in the settlement for the
class action suit. Looking at the website and court documents available at
the settlement website, it appears legit.
Tom Green
--
Expertsites, Inc.
Re: Ok, what's the point of this spam/phish?
Posted by Gino Cerullo <gc...@pixelpointstudios.com>.
On 28-Aug-06, at 8:30 AM, Loren Wilton wrote:
> I can't figure out who is trying to do what here, but it looks real
> suspicious. Anyone seen one of these before?
>
> Loren
>
> Status: U
> Return-Path: <dr...@dm-4.com>
> Received: from mta5a.dm-4.com ([64.40.98.32])
> by mx-clapper.atl.sa.earthlink.net (EarthLink SMTP Server) with
> SMTP id 1ghjmQ4WF3Nl34b2
> for <lw...@earthlink.net>; Sun, 27 Aug 2006 08:03:56 -0400 (EDT)
> DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; q=dns; s=x; d=dm-4.com;
> h=Date:Subject:From:To:Mime-Version:Content-Type;
> b=bveD9400nJ18QotyLuey2SwDQoG8lK/
> VCoFxRlPQEkOts6AoGD2kr02TPEBlYGtKAJBAEz0/vu5O hUkHSekGa
> +CPYZHDPIJO2FWTERIO6sUYqFifQJBu54RgUr5R0PN1s8qTb6Gbj68hN5npUh/
> AvOrc BJoV0ftmoVaSvURJSFI=DomainKey-Signature: a=rsa-sha1;
> c=nofws; q=dns; s=x; d=dm-4.com;
> b=WVASzl9kHmkmjVLCihLcLHaHwky6WdpNboPQ+ExpbRnS6UpXJjJTtUaJ
> +TLvDTgjbzY55U8mcqtM 4oxLqh/sQD/4jpL4TcnqrTNsWBAYiKhzsXU+WqaOpE/
> tLxbgMii9eGlE/LnRLLjp+4H6wY6jFx+9 MdtNTCsPGCB1NR4njd8=;Received:
> by mta5a.dm-4.com (PowerMTA(TM) v3.0r31) id hu652o09jc44
> for<LW...@EARTHLINK.NET>; Fri, 25 Aug 2006 15:48:22 -0700
> (envelope-from<dr...@dm-4.com>)Date: Fri, 25 Aug
> 2006 22:48:22 GMTSubject: Notice of DRAM Class Action Partial
> SettlementsFrom: "DRAM Class Administrator"
> <dr...@dm-4.com>To: LWILTON@EARTHLINK.NETReply-To:
> dramclassadministrator@dm-4.comX-Mailer: XTUU1N H2P03IY VZQTROO
> QG0ICIMime-Version: 1.0Content-Type: multipart/alternative;
> boundary=dmboundaryMessage-Id: <200608270803.1ghjmQ4WF3Nl34b2@mx-
> clappe
> r.atl.sa.earthlink.net>X-ELNK-AV: 0X-ELNK-Info: sbv=0; sbrc=.0;
> sbf=0b; sbw=000;X-NKVIR: ScannedX-WiltonBefore: user wiltonX-
> Wilton: user wilton--dmboundaryContent-Type: text/plain;
> charset=iso-8859-1* * * * * * * * * * * * * * * * * * * * * * * * *
> * ** * * * * * * * * * * * * * * * * * * * * * * * * * *An
> Important Notice from the United States DistrictCourt for the
> Northern District of California AboutPartial Class Action
> Settlements Involving DynamicRandom Access Memory ("DRAM")* * * * *
> * * * * * * * * * * * * * * * * * * * * * ** * * * * * * * * * * *
> * * * * * * * * * * * * * * *IF YOU PURCHASED DRAM IN THE UNITED
> STATES, YOUCOULD GET BENEFITS FROM THE PARTIAL SETTLEMENTS.* * * *
> * * * * * * * * * * * * * * * * * * * * * * ** * * * * * * * * * *
> * * * * * * * * * * * * * * * *Three separate proposed settlements
> totaling$160,750,000.00 have been reached in a class actionlawsuit
> concerning prices of DRAM with defendants:Infineon Technologies AG
> and Infineon Technologies
> North American Corp.; Samsung Semiconductor, Inc.;and Hynix
> Semiconductor Inc. and Hynix SemiconductorAmerica, Inc. These are
> the first settlements reachedin this litigation, which will
> continue against theremaining defendants. You may be a member of
> theSettlement Class whose rights may be affected bythis lawsuit.
> The sole purpose of this notice is toinform you of the lawsuit so
> that you may decide whatsteps to take in relation to it.You do not
> need to do anything to remain in the Class.Settlement Class members
> will be entitled to receivemoney from the settlement fund when it
> is ultimatelydistributed. If you want to exclude yourself from
> theClass, you must do so not later than October 3, 2006.Please read
> the Notice described in the next paragraphcarefully for directions
> on how to exclude yourself.If you do not timely exclude yourself
> from the Classbut want to object to any or all of the
> settlements,you must file a written objection not later thanOctober
> 3, 2006. Please read the Notice describedin the next paragraph
> carefully on how to object.A more detailed description of this
> litigation and theproposed settlements are contained in the Notice
> ofPendency of Class Action and Partial Class ActionSettlements (the
> "Notice"). The Notice may be accessed at http://
> www.DramAntitrustSettlement.com/or obtained free of charge by
> writing to: In re DRAMAntitrust Litigation, c/o Rust Consulting,
> Inc., P.O.Box 24657, West Palm Beach, FL 33416 or calling theClass
> Administrator at (866) 483-9938.To obtain more information
> describing your rights underthe partial settlements, contact the
> Class Administratorby writing to: In re DRAM Antitrust Litigation,
> c/o RustConsulting, Inc., P.O. Box 24657, West Palm Beach, FL33416
> or calling toll-free 1-866-483-9938.To access the settlement web
> site, click on thefollowing link: http://
> www.DramAntitrustSettlement.com/* * * * * * * * * * * * * * * * * *
> * * * * * * * * ** * * * * * * * * * * * * * * * * * * * * * * * *
> * *--dmboundary
>
This looks like legitimate mail that was sent to the wrong address.
Unless, of course, your name and address was added to the list
regarding this class-action.
It happens sometimes. It's just that we've become overly suspicious
of all the email we get, sometimes we forget that honest mistakes
sometimes happen.
--
Gino Cerullo
Pixel Point Studios
21 Chesham Drive
Toronto, ON M3M 1W6
416-247-7740
Re: Ok, what's the point of this spam/phish?
Posted by Gino Cerullo <gc...@pixelpointstudios.com>.
On 28-Aug-06, at 8:30 AM, Loren Wilton wrote:
> I can't figure out who is trying to do what here, but it looks real
> suspicious. Anyone seen one of these before?
>
> Loren
>
> Status: U
> Return-Path: <dr...@dm-4.com>
> Received: from mta5a.dm-4.com ([64.40.98.32])
Just to follow-up, the domain dm-4.com publishes an SPF record and
according to the online tools, the email did originate from an
approved sender.
# SPF record
dm-4.com. IN TXT "v=spf1 ptr:dm-4.com -all"
# Approved mail server
mta5a.dm-4.com. IN A 64.40.98.32
# From the open.spf.org evaluator
An email system which uses SPF saw a message coming from the IP
address 64.40.98.32 which is mta5a.dm-4.com; the sender claimed to be
dramclassadministrator@dm-4.com.
mta5a.dm-4.com is approved for dm-4.com, so that mail should have
been accepted.
Unfortunately, I don't know of any online tools to evaluate the
Domain Key.
--
Gino Cerullo
Pixel Point Studios
21 Chesham Drive
Toronto, ON M3M 1W6
416-247-7740